CVE-2026-14777
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
A weakness in SourceCodester Online Examination & Learning Management System 1.0 in the file /announcements.php allows unrestricted file upload. The attack can be executed remotely, and the exploit is publicly available.
Risk Assessment
The organization is at risk of remote system takeover via malicious file upload, potentially leading to data confidentiality and integrity breaches.
Recommendation
Immediately update the system to the latest version or apply a security patch, and restrict access to the /announcements.php file.
Original NVD description (English source)
A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The name of the affected product appears to have a typo in it.